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Description 

System and Method for Integrated 
Wireless WAN/LAN Location of a Device 

Background of Invention 

[0001] This application claims priority to U.S. Provisional Applica- 
tion No. 60/481,667, filed November 19, 2003, the en- 
tirety of which is incorporated herein by reference. 

[0002] wireless local area network (WLAN) connectivity, such as 
IEEE 802.11 technology (also known as WiFi™), has prolif- 
erated into the consumer home and enterprise environ- 
ment. Many enterprises rely on WLAN connectivity in place 
of traditional wired LANs. Moreover, there has been a re- 
cent trend to incorporate WLAN capability into other radio 
communication devices, such as mobile cell phones. A 
mobile cell phone with WLAN capability allows a user to 
have connectivity in both a wide area network (WAN) envi- 
ronment through the cell phone infrastructure as well as 
wireless LAN connectivity. 

[0003] Techniques are being developed to locate devices operat- 



ing in the wireless LANs. This has utility in maintaining 
the security of the wireless LAN, particularly in a corporate 
enterprise environment. In fact, these location techniques 
have much greater accuracy than the location techniques 
available on cell phone networks, particularly when the 
cell phone device goes into an indoor environment. 
[0004] | t would be desirable to exploit the location capabilities of 
wireless LANs in locating a device that has both wireless 
WAN and wireless LAN communication capability. 
Summary of Invention 

[0005] Briefly, techniques are provided that enable accurate loca- 
tion tracking of devices having both wireless WAN and 
wireless LAN capability. A device with this dual communi- 
cation capability may be triggered to initiate a wireless 
LAN location procedure in response to receiving a wireless 
WAN signal. The request for initiating the location process 
may be a user of the device itself, or any third party desir- 
ing knowledge about the location of the device. This pro- 
cess exploits the advantages of the wireless LAN location 
capabilities to use the wireless LAN link for location de- 
termination which may be more accurate than wireless 
WAN and/or global positioning system (GPS) location 
techniques. Any location technique useful in a wireless 



LAN environment may be employed. The system and 
method described herein are useful to locate any individ- 
ual or object that is carrying or is tagged with a device 
having wireless WAN and wireless LAN connectivity. 
[0006] other objects and advantages of the present invention will 
become more readily apparent when reference is made to 
the following description in conjunction with the accom- 
panying drawings. 
Brief Description of Drawings 

[0007] FIG. 1 is block diagram of a system in which the inte- 
grated WAN/LAN location process may be performed. 

[0008] FIG. 2 is a flow chart diagram of an integrated WAN/LAN 
location process. 

[0009] FIG. 3 is a flow chart diagram of an integrated WAN/LAN 
location process suitable for emergency (e911) and other 
situations. 

[0010] FIG. 4 is a block diagram of a device having wireless LAN 
and wireless WAN communication capability. 
Detailed Description 

[0011] Referring first to FIG. 1, an environment is shown in which 
an integrated wireless wide area network/local area net- 
work (WAN/LAN) location process is performed to locate a 



device 10 having both wireless WAN communication capa- 
bility and wireless LAN communication capability (also re- 
ferred to as IP-capable). Examples of such devices are 
mobile phones, one-way and two-way pagers, wireless 
two-way messaging devices (e.g., Blackberry™ devices) 
and examples of WAN communication capability are mo- 
bile cellular telephone services (using AMPS, TDMA, CDMA 
or GSM standards), one-way and two-way paging services, 
wireless two-way messaging devices. An example of wire- 
less LAN capability is an IEEE 802.11 wireless LAN. In ad- 
dition, the device may have Voice-Over-Internet Protocol 
(VOIP) communication capability to make voice calls over 
the Internet via a wired or wireless LAN. 
[0012] The integrated wireless WAN/LAN location process uses 
the relatively long-range communication capabilities of 
the wireless WAN to contact the device, and then uses the 
relatively short-range communication capabilities to more 
accurately determine the physical location of the device. 
The location information may be delivered to a variety of 
different types of parties that either request or may be in- 
terested in the location information. However, according 
one embodiment described hereinafter, a device having 
wireless VOIP communication capabilities may initiate the 



wireless LAN location procedure without necessarily re- 
sorting to the wireless WAN system. 
[0013] FIG. 1 shows a wireless LAN environment in which the de- 
vice 10 operates. In that environment, there is one or 
more wireless LANs access points (APs) 12. There are also 
one or more sensors 20(1) to 20(4) that are useful in a 
wireless LAN location process. The sensors 20(1) to 20(4) 
may be wireless LAN devices, e.g., APs or stations (STAs) 
that are capable of receiving signals transmitted by other 
wireless LAN devices, including device 10, and collecting 
data therefrom that is useful in a wireless LAN location 
process. The AP 12 and the sensors 20(1) to 20(4) are also 
connected to a wired LAN 14. A WLAN location server 30 
is provided that executes a WLAN location process shown 
at reference numeral 32 using data collected by one or 
more of the sensors 20(1) to 20(4). The wired LAN 14 may 
in turn be connected to the Internet shown at reference 
numeral 32. 

[0014] The wireless WAN portion of the system includes a wire- 
less WAN operator control center 40 that connects to a 
plurality of wireless WAN base stations, which in this ex- 
ample two are shown 42(1) and 42(2). Each base station 
42(1) and 42(2) connects to a wireless WAN tower 44(1) 



and 44(2), respectively, that transmits and receives wire- 
less WAN signals to and from wireless WAN capable de- 
vices, including device 10. 

[0015] As appreciated by those with ordinary skill in the art, a 
wireless WAN system can communicate with devices over 
relatively large distances between the base station and the 
device, when the device is located both indoor and out- 
doors. In this sense, it is a relatively long-range commu- 
nication system as compared to a wireless LAN system in 
which a device can communicate over relatively smaller 
distances between and AP and a device. A unique aspect 
of the method described herein is that the WAN system 
can be exploited to contact a device to be located that is 
otherwise in an area where wireless WAN or CPS location 
techniques are not as accurate or perhaps not possible. 
Once contacted, the WAN system can send a signal to the 
device that causes the device to initiate a wireless LAN lo- 
cation procedure with respect to a wireless LAN in prox- 
imity to the device. 

[0016] Another component of the system is a supervisory loca- 
tion server 60 that performs security and higher level 
management 64 in connection with the integrated wireless 
WAN/LAN location process and may optionally perform 



the location computations 32 associated with the wireless 
LAN location process. The supervisory location server 60 
may cooperate with a user directory 66 that stores secu- 
rity, identifier and related information for the wireless 
WAN /LAN capable devices for which the location services 
is to be provided. The user directory 66 stores identifier 
and authentication information about each of the devices 
that can be located, and also about each of the parties a 
user of the device may designate as authorized to receive 
location information about the device. This information is 
used to authenticate a device and a party requesting loca- 
tion information about the device to provide adequate se- 
curity and privacy with respect to the location of the de- 
vice. 

[0017] There are many ways to initiate the location process. Ac- 
cording to one method, shown in FIG. 2, the location pro- 
cess is initiated by a request from a third party that 
wishes to locate the device 10. For example, the third 
party may be a friend, family member, co-worker, em- 
ployer, etc., that wishes to know the precise location of an 
individual using or carrying the device 10. According to 
another method, shown in FIG. 3, the device 10 itself initi- 
ates the location process, and one application of this 



method is emergency (e.g., e911) condition location. For 
example, the user of the device 10 may be faced with an 
emergency condition and his/her location needs to be de- 
termined for use by an emergency responder facility. Al- 
ternatively, a user of the device may wish to initiate the 
location process to forward device location information to 
a designated party, on a periodic or on-demand basis. 

[0018] The flow charts shown in FIGs. 2 and 3 illustrate steps 
performed in one or more of: the device 10, the WLAN 
server 30, the supervisory location server 60 and the 
wireless WAN operator control equipment 40 (in connec- 
tion with a WAN base station and WAN tower) as part of 
the location process described herein. 

[0019] jhe process of FIG. 2 is first described, in conjunction 
with FIG. 1. A location request is received in step 110 at 
the supervisory location server 60. In the request, the de- 
vice to be located is identified through an identifier, such 
as cell phone number, e-mail address, multimedia mes- 
sage service (MMS) address, short messaging service (SMS) 
address, etc. The location request message may originate 
from a party at a personal computer, cellular phone, or 
other wired or wireless communication devices, and may 
be an e-mail, voice command, MMS message, etc., or 



from a computer facility that is programmed to automati- 
cally track the location of the device. In step 120, the su- 
pervisory location server 60 receives the message and 
through information stored in the database authenticates 
the party requesting the location information and the de- 
vice to be located. Once this information is authenticated, 
the supervisory location server 60 generates and sends an 
MMS or other data-link based message to the wireless 
WAN operator equipment commanding the WAN operator 
to trigger the device 10 engage in the location process. In 
step 130, the wireless WAN operator equipment sends a 
wireless LAN location initiate message to the device 10 
commanding it to initiate a wireless LAN location proce- 
dure. This message may include a list of IP addresses for 
WLAN location servers that are available for WLAN location 
services. Alternatively, the location request message is 
sourced as explained above, but rather than being sent to 
the supervisory location server 60, it is sent directly to a 
server that is part of a WAN location service, that in step 
130, routes an MMS or other data-link based location 
session request message through wireless WAN infras- 
tructure to the device 10. 
[0020] | n the device 10, there is a location session software pro- 



cess or other functionality that processes the wireless LAN 
location initiate message and in response causes the de- 
vice 10 in step 140 to initiate a wireless LAN location pro- 
cedure with a WLAN location server, such as server 30. 
When the device 10 receives the wireless LAN location ini- 
tiate message from the wireless WAN operator equipment, 
it may already be associated with an AP. If not, it will at- 
tempt to associate by sending a Beacon frame or a re- 
quest-to-send (RTS) frame or other suitable 802.11 frame 
to a WLAN AP. In any event, once associated with an AP, in 
step 140, the device 10 sends a location start session 
message (including a verification identifier) addressed to 
WLAN location server 30 (or any other WLAN location 
server identified in the message related to the device 10 
in step 130) via an AP. When the WLAN location server 30 
receives the location start session message via the AP 
from the device 10, further authentication may be con- 
ducted by exchanging information with the supervisory 
location server 60 for verification against data in the user 
directory 66 based on name, cell phone number, MMS ad- 
dress, etc. to be sure the device 10 is authenticated be- 
fore initiating the location process. 
[0021] The WLAN location server 30 starts a location process in 



step 150 by sending location set-up messages to the de- 
vice 10 and to sensors 20(1) -20(4) that will participate in 
the location procedure. In response to receiving the loca- 
tion set-up messages, the sensors 20(1) to 20(4) prepare 
for the WLAN location procedure. 
[0022] step 160 represents execution of the WLAN location pro- 
cedure. The types of signals transmitted, data captured, 
measurements made and computations performed in step 
160 depend on the specific type of WLAN location proce- 
dure employed. Any procedure suitable for use in the 
WLAN environment may be employed in connection with 
the processes described herein. Some WLAN location pro- 
cedures involve collecting data at one or more sensors 
20(1) to 20(4) associated with the transmission of one or 
more signals by the device 10 (and optionally transmis- 
sion of signals by one of the sensors at a corresponding 
known location). The sensors 20(1) to 20(4) send collected 
data to the WLAN location server 30 that executes a loca- 
tion computation in step 170 to compute the location of 
the device 10. In step 180, the location server 30 then 
sends location information to the requester, either directly 
or through the supervisory location server to the re- 
quester, via an email message. Alternatively, the location 



information may be conveyed to the requester through the 
wireless WAN operator control equipment 40 in the form 
of an email, voice message, call back number, web page 
link to a map view, etc. The location information may take 
the form of coordinates, street address, building room lo- 
cation, as well as graphical information showing the 
three-dimensional location of a device within a building, 
etc. 

[0023] The advantage of the wireless LAN location process is that 
it provides higher resolution location accuracy of the de- 
vice that is to be located, and also in many cases, locates 
the device in conditions where a wireless WAN location 
process (GPS, and other known wireless WAN location 
techniques) could not locate the device. 

[0024] upon completion of the location computation, the location 
server 30 may send a message that instructs the device 10 
to terminate the WLAN connection in order to save power 
on the device 10. However, if the device 10 is using the 
WLAN connection for voice or data communications, it 
may maintain the link for this purpose and the location 
server 30 may continue tracking the location of the device 
based on transmissions back and forth with an AP using 
data captured at the sensors in proximity to the device 10. 



[0025] FIG. 3 shows a location process 200 whereby the trigger- 
ing event to start the location process originates at the 
device 10. Reference is also made to FIG. 1. For example, 
a user of the device may initiate an emergency call, such 
as a 911 call, through the wireless WAN operator equip- 
ment. Alternatively, the user of the device 10 may wish to 
preemptively convey location information to a particular 
destination, person or entity, and the procedure shown in 
FIG. 3 may be employed for that purpose as well. In step 
210, a call or message is received from the device 10 at 
the wireless WAN operator equipment. The call may be an 
emergency (911) call, or a call or message from the device 
10 indicating that location information should be sent to a 
party identified or designated in the call or message (by 
email address, phone number, etc.). In response, in step 
220, the wireless WAN operator equipment sends a mes- 
sage (similar to the type of message sent in step 130 in 
FIG. 1) to cause the device 10 to initiate a WLAN location 
session. Steps 230, 240, 250 and 260 are similar to steps 
140, 150, 160 and 170 in FIG. 1. In step 270, the WLAN 
location server 30 or supervisory location server 60 sends 
the location information about device 10 to the emer- 
gency responder facility 50, or to some other party or 



destination that device 10 designates to receive location 
information about the device 10. 
[0026] | n t he event that the device 10 has VOIP capability via a 
wireless LAN, the process shown in FIG. 3 may be modi- 
fied to trigger off an emergency VOIP (e911) call, in which 
an emergency condition of the call, or other designated 
information in the message sent by the device, is detected 
at a more locally positioned gateway, server or router 
connected to the wireless LAN that routes VOIP calls over 
the Internet. This device would detect the emergency con- 
dition and send a message to the wireless device 10 to 
initiate the WLAN location procedure as depicted in steps 
220 through 270 in FIG. 3. Alternatively, if a WLAN loca- 
tion procedure has already been conducted for the device 
10, the location information for that device is automati- 
cally routed to an emergency responder facility 50 in re- 
sponse to the emergency VOIP call. And again, this pro- 
cess may be similarly applied to an application in which 
the VOIP call or message initiates a location procedure to 
send location information about the device to a particular 
party designated by the device 10 in the VOIP call or mes- 
sage. 

[0027] while the foregoing description of FIGs. 2 and 3 suggests 



that the location information may be computed at the 
WLAN server 30, it should be understood that it may be 
computed by the supervisory location server 60. In the 
latter case, the data collected by the sensors 20(1) to 
20(4) would be sent via the Internet (if is not connected to 
the LAN of the sensors) to the supervisory location server 
60 for computation. Alternatively, the location computa- 
tion may be performed by a computation device located 
and coupled to one or more of the sensors 20(1) to 20(4). 
[0028] Referring to FIG. 4, a high level block diagram of the de- 
vice 10 is shown. The device 10 has a wireless WAN re- 
ceiver or transceiver 300 and a baseband processor 310 
that may be part of a wireless WAN chipset of any of the 
varieties known in the art. In addition, the device 10 has a 
WLAN radio transceiver 320 (e.g., IEEE 802.11a, b and/or 
g) and a WLAN baseband processor 330 that may be part 
of an 802.11 chipset. A processor 340 is coupled to the 
baseband processor 310 and the WLAN baseband proces- 
sor 330 to perform higher level control of the device. As is 
known in the art, the processor 340 executes an embed- 
ded operating system 350 that is capable of supporting 
one or more applications, such as Java applets, Qual- 
comm's BREW™ technology or other similar software ap- 



plication platforms useful in wireless communication de- 
vices. The location session manager software, described 
above in connection with FIGs. 2 and 3, is shown at refer- 
ence numeral 360 and may take the form of one of these 
software applications. It should be understood that it is 
possible that the WAN receiver or transceiver and base- 
band components may be integrated with the WLAN radio 
transceiver and baseband components. The location ses- 
sion management software 360 and other software may 
be embodied by processor readable instructions encoded 
on a processor readable medium (e.g., memory included 
in or associated with) the processor 360. 
[0029] The wireless LAN location process used in conjunction 

with the process described herein may be any heretofore 
known or hereinafter developed methodology and system 
for locating devices operating in a wireless LAN environ- 
ment. Known location techniques employ time of arrival 
(TOA), time difference of arrival (TDOA), and received sig- 
nal strength with respect to one or more signals transmit- 
ted by the device to be located. For a TDOA-based loca- 
tion system, see, for example, commonly assigned and 
co-pending U.S. Application No. 10/409,563, filed April 8, 
2003, and entitled "System and Method for Locating Wire- 



less Devices in an Unsynchronized Wireless Environment," 
the entirety of which is incorporated herein by reference. 
Examples of location processes that operate on received 
signal strength information are described, for example, in 
U.S. Patent No. 6,674,403 B2 and International Patent 
Publication No. WO 02/054813A1, which are incorporated 
herein by reference. The details of these location proce- 
dures are not described herein, but may be found in the 
aforementioned and other documents describing these 
techniques. 

[0030] jo summarize, a method is provided for determining the 
physical location of a device that has both wireless wide 
area network (WAN) communication capability and wire- 
less local area network (LAN) communication capability, 
comprising steps of receiving a signal at the device from 
wireless WAN equipment that causes the device to initiate 
a wireless LAN location process; and executing the wire- 
less LAN location process to determine the physical loca- 
tion of the device. Said another way, a method is provided 
for determining the physical location of a device that has 
both wireless relatively long-range communication capa- 
bility and wireless relatively short-range communication 
capability, the method comprising steps of: receiving a 



relatively long-range communication signal at the device 
from wireless equipment that causes the device to initiate 
a wireless short-range location process; and executing 
the wireless short-range location process to determine 
the physical location of the device. 

[0031] From the perspective of the steps performed in the device 
itself, the method generally comprises steps of receiving a 
signal from wireless WAN equipment that is intended to 
initiate a location procedure to locate the device; and ini- 
tiating a wireless LAN location process in response to re- 
ceiving the signal. 

[0032] | n addition, in the context of the steps performed in the 
device itself, a processor readable medium is provided 
that is encoded with instructions that, when executed by a 
processor, perform steps of processing a signal received 
from wireless WAN equipment that is intended to initiate a 
location procedure to locate a device that receives the sig- 
nal; and initiating a wireless LAN location process in re- 
sponse to receiving the signal. Similarly, a processor 
readable medium is provided that is encoded with in- 
structions that, when executed by a processor, perform 
steps of generating a wireless signal for transmission 
from the device, wherein the wireless signal includes in- 



formation that indicates a location procedure is to be per- 
formed with respect to the device; and initiating a wireless 
LAN location process to determine the physical location of 
the device. 

[0033] Moreover, a method is provided for determining the phys- 
ical location of a device that has both wireless wide area 
network (WAN) communication capability and wireless lo- 
cal area network (LAN) communication capability, com- 
prising steps of: transmitting a wireless signal from the 
device, wherein the wireless signal includes information 
that indicates a location procedure is to be performed 
with respect to the device; and executing a wireless LAN 
location process to determine the physical location of the 
device. 

[0034] Further still, a wireless radio communication device is 

provided comprising a radio receiver that receives wireless 
wide area network (WAN) signals; a radio transceiver that 
transmits and receives wireless local area network (LAN) 
signals; and a processor coupled to the radio receiver and 
to the radio transceiver that processes a signal received by 
the radio receiver from wireless WAN equipment that is 
intended to initiate a location procedure to enable the de- 
vice to be located, and initiating a wireless LAN location 



process in response to receiving the signal. 

[0035] From the perspective of a server that manages or partici- 
pates in a process for locating a device that has both 
wireless wide area network (WAN) communication capabil- 
ity and wireless local area network (LAN) communication 
capability, the method comprising steps of: receiving from 
a party a request to locate the device; verifying the party 
making the request and the device to be located; sending 
a signal to wireless WAN equipment that caused the wire- 
less WAN equipment to transmit a signal to the device the 
causes the device to initiate a wireless LAN location pro- 
cess; and receiving location information determined from 
the wireless LAN location process and delivering the loca- 
tion information to the party. 

[0036] The above description is intended by way of example only. 



